Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/6YHNH8bDLks7fJxTiwTdMKgRw8s.mft
File:                     6YHNH8bDLks7fJxTiwTdMKgRw8s.mft (raw, json)
Hash identifier:          mnJ2wd/+zufL8UTI3m5KhkhVlvL7gkpdndJv9a3oaQM=
Subject key identifier:   32:6C:CB:AE:49:3B:27:FC:73:9E:68:B0:48:15:9F:70:D5:CA:39:8A
Authority key identifier: E9:81:CD:1F:C6:C3:2E:4B:3B:7C:9C:53:8B:04:DD:30:A8:11:C3:CB
Certificate issuer:       /CN=e981cd1fc6c32e4b3b7c9c538b04dd30a811c3cb
Certificate serial:       0197688540AA8FCB26ABC7D305E98623F9B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6YHNH8bDLks7fJxTiwTdMKgRw8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/6YHNH8bDLks7fJxTiwTdMKgRw8s.mft
Manifest number:          158D
Signing time:             Fri 13 Jun 2025 09:00:52 +0000
Manifest this update:     Fri 13 Jun 2025 09:00:52 +0000
Manifest next update:     Sat 14 Jun 2025 09:00:52 +0000
Files and hashes:         1: 6YHNH8bDLks7fJxTiwTdMKgRw8s.crl (hash: SNdclOjJTc+cOOb2hoKoBK+KtKQASMR60ejFSyr2BCg=)
                          2: IVdjVoN4btCTyMYmCO02k9GntBE.roa (hash: a5NdeKrzfcEUiEbmiEcDr8auHl1ryaiEhNrV1p0CNFw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/6YHNH8bDLks7fJxTiwTdMKgRw8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/6YHNH8bDLks7fJxTiwTdMKgRw8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6YHNH8bDLks7fJxTiwTdMKgRw8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 09:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:85:40:aa:8f:cb:26:ab:c7:d3:05:e9:86:23:f9:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e981cd1fc6c32e4b3b7c9c538b04dd30a811c3cb
        Validity
            Not Before: Jun 13 09:00:52 2025 GMT
            Not After : Jun 14 09:00:52 2025 GMT
        Subject: CN=326ccbae493b27fc739e68b048159f70d5ca398a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a8:de:00:09:44:cb:1c:42:91:4e:29:e8:f4:
                    cf:d7:7f:c0:a1:0f:7b:07:d7:99:df:f4:b9:dc:fc:
                    e4:dd:8e:69:dd:11:f9:ac:74:34:62:9d:a0:5f:e7:
                    24:36:3f:44:77:91:de:71:07:d8:80:0c:09:0d:bb:
                    aa:a7:02:f6:84:f4:41:74:6f:da:e7:d5:f4:c2:a2:
                    eb:43:13:65:e1:c6:34:23:33:46:d5:1d:92:ec:a9:
                    1c:a8:b4:ec:98:4c:af:c8:d7:e1:4c:bd:40:95:80:
                    d5:31:fb:b4:a2:2c:86:06:a7:ba:b6:8f:83:7f:f9:
                    3d:5e:66:ee:90:73:48:bf:4b:d9:66:fe:35:64:35:
                    a0:99:cd:9d:f4:34:d0:67:10:5e:12:09:0b:42:ae:
                    6e:9a:23:fd:43:17:a5:4c:77:15:4c:35:f3:a8:ac:
                    8a:a0:7a:71:cf:82:05:0b:fd:b5:d7:fe:8c:a2:a7:
                    bb:18:6e:6b:9d:18:2f:80:22:d2:7b:a1:e1:f4:06:
                    d8:f7:4e:3e:92:ee:5e:df:b4:15:15:0b:2a:a8:df:
                    1b:cd:88:60:68:e9:d1:ad:5b:30:d0:e7:ce:2c:33:
                    28:f0:c6:87:0c:df:f6:47:4f:de:8f:e8:5b:2a:a1:
                    db:a7:88:cf:0b:22:c5:cc:0a:d1:b6:93:6d:d2:80:
                    b9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:6C:CB:AE:49:3B:27:FC:73:9E:68:B0:48:15:9F:70:D5:CA:39:8A
            X509v3 Authority Key Identifier:
                keyid:E9:81:CD:1F:C6:C3:2E:4B:3B:7C:9C:53:8B:04:DD:30:A8:11:C3:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6YHNH8bDLks7fJxTiwTdMKgRw8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/6YHNH8bDLks7fJxTiwTdMKgRw8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/6YHNH8bDLks7fJxTiwTdMKgRw8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:8b:04:cf:74:f7:30:ec:0d:d9:e2:db:2d:ea:9f:40:ac:23:
         e4:eb:ae:93:88:30:81:65:8e:a9:42:d3:fb:06:01:7c:26:93:
         e9:aa:a4:55:82:a2:3c:c3:8e:db:20:6d:45:b2:f7:4f:c4:c0:
         6c:97:80:10:63:7e:ad:a5:36:be:25:72:15:04:92:22:ac:ce:
         08:06:b5:ea:12:db:50:01:93:a1:57:df:49:35:e6:fb:e8:12:
         86:27:d3:9f:19:2c:9f:a0:73:1a:1a:b5:63:1b:73:41:8f:a8:
         de:13:60:a4:d1:3f:90:d0:64:70:e1:93:ef:3c:9e:fa:8d:b8:
         d0:f3:34:8b:92:af:c5:27:23:47:48:52:51:63:bb:e9:80:dc:
         d2:d5:8c:d0:a6:67:3f:9c:b2:2a:d9:5b:37:46:83:b7:58:d5:
         08:f0:3c:a1:7c:eb:6f:a8:0f:32:a6:ca:da:e3:3d:7b:2d:19:
         fa:3c:4b:be:a4:4d:04:cb:9c:5c:3a:21:5d:7b:4a:09:8a:63:
         71:82:19:7b:f6:35:b8:0a:7c:57:16:eb:55:f1:d2:ee:10:ab:
         a5:71:e9:38:f0:ad:4c:4d:f3:bc:10:b8:1e:28:4f:12:51:e8:
         f4:b9:b8:0a:d1:07:5a:ca:7b:6b:34:2b:59:dc:09:1d:52:14:
         51:b4:74:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:24:07 2025 by rpki-client